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Description 

BACKGROUND OF THE INVENTION 

1. FIELD OF THE INVENTION 

[0001] The present invention relates generally to in- 
fomnation systems, and in particular to a system and 
methods that enable the coordination of activity among 
distributed information systems. 

2. Description of the Related Art 

[0002] The recent change in the structu re of business 
organizations, from the independent monolithb entity to 
multiple interdependent businesses, mirrors a similar 
evolution in computer systems from the single main- 
frame to distributed networks of personal computers 
and woricstations. Since computer networits are ex- 
tremely efficient in communicating information and per- 
forming activities between distn'buted sites, modem net- 
works should be the obvious beneficiaries of this revo- 
lution in technology. For example, such routine activities 
as ordering and confirming purchases could be per- 
formed automatically between existing systems by a 
shared connputer networt(. Numerous shortcomings in 
the state of the art, however, prevent full exploitation of 
conventional network technology for inter-enterprise 
purposes. 

[0003] The most pressing problems presented by the 
use of shared networks between business partners are 

(1) the heterogeneity of the partner computer systems, 

(2) the heterogeneity of the data used by the partner sys- 
tems, (3) communk^ation security and reliability be- 
tween systCTns, and (4) the legal, organizational and cul- 
tural boundaries among partners. 

[0004] With respect to system heterogeneity, organi- 
zations often use combinations of operating systems, 
middleware systems, and software applications that are 
incompatible with one another. Widespread middleware 
deployment is now undenway, but interoperation among 
the leading camps has yet to be fully defined. Especially 
problematic are differences at the applk^ation level, 
which are fundamental and will continue to challenge 
implementers for some time. 

[0005] With respect to the second problem, data het- 
erogeneity, different applteations and users of those ap- 
plk^ations often represent information in different ways 
or use different kinds of information to accomplish the 
same task. These gaps can be particularty signifk:ant 
when the applications and their users are distributed 
among different enterprises. Bridging the associated 
syntactic and semantk; gaps in information can require 
a mixture of transformation capabilities as well as neu- 
tral object. 

[0006] With respect to the third problem, communca- 
tion security and reliability, any interaction among the 
systems of a business networic requires the presence of 



reliable and secure communication pathways between 
the participants. The concem for security is especially 
prominent when the Intemet is used as a link in the com- 
munication pathway, since this medium is susceptible 
5 to eavesdropping and other f omos of security attacks. 
[0007] With respect to the fourth problem, any attempt 
to automate business processes between multiple part- 
ners must overcome the numerous non-technical bani- 
ers associated with management of a project distributed 
10 among multiple organizatrans. These challenges in- 
clude mismatches between project priority and resource 
allocation, language barriers, time zone differences and 
both corporate and governmental regulations. These 
challenges limit the levels of coordination that are 
IS achievable. Any technkjal solution, therefore, must fo- 
cus on minimizing the scope and complexity of the mu- 
tual commitments required to implement the solution. 
[0008] Currently, there are at least five known meth- 
ods for extending interdependent processes beyond 
one computer system to other systems connected by 
conventional computer networtcing resources. The first 
is the manual approach in whk:h users of multiple com- 
puter systenns communicate information between one 
another via telephone, fax, or other media. The commu- 
nk:ated infomnation is then entered by hand into the re- 
spective computer systems. The manual approach may 
be used to bridge gaps in automation, but is obviously 
limited in its ability to tightly couple processes among 
partners in both reliable and efficient manner. 
[0009] The second approach, whk^ arose in the era 
of home-grown mainframe applications, is known as 
Electronic Data Interchange (EDI). EDI is a broadly de- 
fined temri, but most often refers to a particular set of 
standards, technologies (Value-Added Networks, Direct 
Dial-ups, mapping software), and practices used for 
electronic data exchange among companies. In EDI, a 
collection of business infomnation (e.g., a purchase or- 
der) may be exported from one application system, 
mapped into a neutral format, transmitted to a partiier 
via a VAN (V^lue-Added Network), mapped by the part- 
ner into a fonnat suitable for its applbation, and import- 
ed into the partner applk:ation. Alternatively, direct dial- 
ing may be substituted for the VAN. EDI, however, is 
generally batch oriented, requires extensive format cus- 
tomization and does not support processes. 
[0010] The third approach, used when business re- 
quirements do not fit the EDI model, is to use a custom 
system designed and implemented to the users' speci- 
fications. This approach ts costly, requires a mixture of 
networic programming and system integration tasks, 
and serves a specific purpose for specific users only. 
Furthemnore, it is inflexible and difficult to modify. 
[0011] Recently, two trends in technology have radi- 
cally changed the ways in which application systems 
may be intertwined. As a result, a fourth and fifth ap- 
proach, as well as an adaptation of EDI, must be added 
to the three discussed above. The first trend is the rapid 
expansion of network infrastructure. The most visible 
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component of this infrastructure e the ubiquitous con- 
nectivity provided by the Internet. Nearly all organiza- 
tions are. or soon will be, connected to the Internet. Cou- 
pled with this connectivity is an expanding set of mid- 
dleware technologies and services such as distributed 
object frameworks and message oriented middleware 
that facilitate more tractable distributed applk^ations and 
promise far greater interoperability of software compo- 
nents. 

[001 2] The sec:ond trend in voh^es advances in the en- 
terprise application systems that are used by compa- 
nies. Key acivanc^es in these systems inc:lucie ctevelop- 
ment of object interfaces and the development of work- 
flowyprcx^ess modeling c^apabilities. Object interfaces 
provide a more flexible and less taxing method of mov- 
ing information to and from applications than prior meth- 
ods such as SQL (Structured Query Language) or ftle- 
t>ased interfaces. Several application vendors now pro- 
vide the ability to design and implement woricflow among 
different application modules. This capability alk>ws 
companies to more easily focnjs on their business proc- 
esses and makes more obvious the need to connect the 
processes of business partners. 
[0013] The most visible impact of these trends, and 
the fourth approach to extending business interdepend- 
ency, is the use of the Worid Wide Web for business-to- 
business interactions. In this model, an employee in one 
business accesses information, suc^ as c:atalog or ship- 
ping infoHTiation, pertaining to the business applications 
of another company by using a standard Web browser. 
This approach, however, is ill-suited to many extended 
enterprise processes that require dependent interac- 
tions among the applic:ation systems of different organ- 
izations. 

[0014] The fifth approach exploits recent middleware 
technology which makes possible the creation of high- 
performanco distributed applications that are logically 
integrated. Though the same tectinology may be used 
to provide interoperation among applk^atbn suites from 
different vendors and among systems at different busi- 
nesses, slgnlfic:ant challenges limit feasibility. Foremost, 
employing micMleware tectinology is a programming 
task that requires signrf k:ant programming skill and spe- 
cial understanding of security, synchronization, and oth- 
er networic issues. The cost of such an endeavor may 
be justified for the vendor of a distributed appltc^ation, 
but companies wishing to engage in a specific extended 
enterprise process are unlikely to devote the capital re- 
quired to build distributed systems from the ground up. 
[001 5] Finally, the adaptation of EDI , referred to as In- 
temet-EDI, is actually a number of methods that attempt 
to rrove the traditional EDI approach discnissed above 
to an Intemet transport medium. These methods are 
motivated by the desire to reduce high transport costs 
associated with Value-Added Networics (VAN's). Effec- 
tively, these methods diverge very lltde from traditional 
EDI. The same nnessage formats, mapping software, 
and even enveloping constructs are employed. Use of 



an open network, however, requires additional security, 
reliability and auditing c:apabilities that were fomnerty 
part of a VAN servko. In addition, the use of these ad- 
ditional servkos in an open network configuration must 

5 be supported by software at the endpoints of an Infor- 
mation exchange. Intemet-EDI, therefore, suffers from 
key limitations such as a lack of process support, an un- 
wieldy representation formalism, and an integration 
model that does not mesh with new practices. 

10 [0016] US 5,390,247 discloses a method and appa- 
ratures for creating a "traveling" program, including in- 
structions and asscx^iated data, whk;h has the c:apability 
of detenmining at least one next destination and moving 
itself together with necossary asscx:tated ciata from one 

IS computer user to another. In particular, D1 focuses on 
digital of authentbatbn. 

[0017] US 5,557,780 discloses a programmable ma- 
ctiine system and method for perfonning electronic data 
interchange (EDI) among two or more trading partners, 
20 including receipt, nr^nipulation and re-transmission of 
EDI structured data in any standard EDI fomrtat without 
the requirement of a template. 
[0018] DE 196 291 92 describes a communk:ation 
system in which transmitter and recoiver computers uti- 
25 itze both publk: and private key enkryption. Hashcodes 
are calculated for the electronic data interchange and 
tncooperated in messages prior to private key encryp- 
tion. 

[0019] GB 2 271 002 deals with comparison of EDI, 
30 message based EDI, transaction based EDI and inter- 
active EDI. 

[0020] The approaches above fail to meet the increas- 
ing demand to implement between disparate systems 
complex, automated processes that are both secnjre 
35 and maintainable. Thus, a system and method to plan 
and control extended business interdependency are 
needed that (1) focuses specifically on peer-to-peer in- 
teractbns among existing business applbation sys- 
tems, (2) supports secure and reliable commun cation, 
^ (3) minimizes custom software development, (4) has 
functionality to handle heterogeneous data representa- 
tion formalisms and (5) has the ability to support com- 
plex processes that extend Into and out of enterprise ap- 
plications. 

45 [0021] The present invention provides a method for 
ccordinating a procoss between a first site and a second 
site, comprising the features of claim 1 and a method 
for creating a prcxoss definition governing a prcxoss be- 
tween a first site and a second site comprising the fea- 
50 tures of claim 9. 

SUMMARY OF THE INVENTION 

[0022] The present invention is directed to methocis 
55 for creating, execnjtlng, and maintaining c^ross-enter- 
prise procosses. Cross-enterprise processes are 
shared automated business prcxosses or workflows 
among distributed information systems that include spe- 
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dftc provisions for automation of these processes 
across organizational boundaries and annong heteroge- 
neous infonnation systenns. 

[0023] The system is comprised of a plurality of inde- 
pendent communicating subsystems called sites with 
common capabilities. Each of the sites includes a server 
with common means of representing and executing 
shared process definitions. These sites act in concert in 
the course of executing shared inter-system processes. 
Process execution comprises coordinated inter-site 
message exchanges that are coupled with controlled 
sequences of actons that are local to each of the sites. 
In addition, each site may include any one of a number 
of applications programs and operating systems for ex- 
ecuting the inter-system processes and intemal proc- 
esses on the server. 

[0024] Automated inter-system processes are repre- 
sented in the methods of the present invention in a two- 
level process model. The top level or public process def- 
tnitionAnodule captures interactions among the inde- 
pendent sites (each typically representing an organiza- 
tion or business unit). Interactions include communica- 
tion events in which one site, designated in the public 
process definition by a node, sends a message of a 
known type to another site. The public process defini- 
tion, then, is a logical grouping or directed graph of in- 
terdependent communication events among a set of 
sites. Each definition specifies a set of valid sequences 
of communication events among the participating sites. 
[0025] Associated with any public process definition 
is a set of lower level or private process definitions or 
modules. A separate private process definition is bound 
to each node in a public process. The private process 
definition specifies a set of possible local actions that 
can be executed at the site when that particular public 
process node is executed. In the preferred embodiment, 
the private process definition is defined in terms of con- 
structs such as operating parameters and software ap- 
plication interactions specific to the node or site. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0026] Figure 1 is a block diagram of an extended en- 
terprise including a plurality of sites having publk; proc- 
ess definitions and private process definitions in accord- 
ance with the present invention. 
[0027] Figure 2 is a graph ical representation of a pub- 
ic process definition including node, arcs and connec- 
tions between them in accordance with the present in- 
vention. 

[0028] Figure 3 'tsa fiow diagram of the proc^ for 
executing a private process definition in accordance 
with the present invention. 

[0029] Figure 4 is a block diagram of a system in ac- 
cordance with the present invention. 
[0030] Figure 5 is a flow diagram of a method for dis- 
tn'buting a publk: process definition in accordance with 
the present invention. 



[0031] Figure 6 is a flow diagram of a method for the 
installation of a public process definition in accordance 
with the present invention. 

[0032] Figure 7 is a flow diagram of a method for ex- 
5 ecuting an instance of a specific process type in accord- 
ance with the present invention. 
[0033] Figure 8 is a graph cat representation of a dis- 
play device showing a graphical user interface for edit- 
ting the pubic process definition. 
10 [0034] Figure 9 is a graph cal representation of a dis- 
play device showing a graphical user interface for edit- 
ting the private process definition. * 

DESCRIPTION OF THE PREFERRED EMBODIMENT 

15 

[0035] Refening to Figure 1 , a prefen^ed embodiment 
of an extended enterprise system 1 00 is shown. The ex- 
tended enterprise system 100 of the preferred embodi- 
ment of the present invention preferably comprises a 

20 plurality of sites 101, 102 and 103 installed at distinct 
organizations that are coupled by a communcattons 
networtc 1 04. These sites 1 01 -1 03 fomn an extended en- 
terprise 100 in whch the intemal processes of each site 
1 01 -1 03 are coupled with the intemal processes of other 

25 sites 1 01 -1 03 via coordinated sequences of infomrtation 
exchanges. For example, sites 101-103 may be busi- 
ness enterprises that comprise three elements of a sup- 
ply chain: supplier, manufacturer and customer. Those 
skilled in the art, however, will recognize that the sites 

30 1 01 -1 03 could for any type of business unit or function, 
that there may be any number of site, and three sites 
101-103 are provided only by way of example. 
[0036] Each of these sites 1 01 -1 03 represents a zone 
of control and is comprised by a set of appi cation sys- 

35 tems that store infomnation and contain logic for retriev- 
ing and modifying that information. Example applica- 
tions include ERR (Enterprise Resource Planning) ap- 
plication suites, Product Data Management (POM) sys- 
tems, logistics applk^ations, and advanced planning 

40 systems (APS). 

[0037] Operation of the present invention includes co- 
ordinated sequences of actions within each site 1 01 -1 03 
tiiat are linked with coordinated sequences of infonma- 
tion exchanges among different sjtes101-103. The ac- 

^ tions executed within each site 1 01 -1 03 include prima- 
rily the movOTent of information into and out of the ap- 
plicatcns associated with sites 101-103. Each ex- 
change of infomnation between sites 1 01 -1 03 is preced- 
ed by a sequence of actions within the sending site and 

so is followed by another sequence of actions within the 
receiving site. Accordingly, these site-specific sequenc- 
es of actions serve as the connections that bind a set of 
information exchanges into a single coordinated se- 
quence of interactions. 

S5 [0038] The possible sequences of local actions and 
site to site exchanges are specified through a process 
definition language. This language allows for complex 
branching and looping logic and can capture constraints 
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that govern the relationships between local action se- 
quences and site to site exchanges. More fonnally, the 
process definition language of the pretend embodi- 
ment includes node and arc elements that are combined 
with a specific ordering and logic to create a directed 
graph (such as depicted in Figure 2 and as will be de- 
scribed below). A single source node 205-225 and a sin- 
gle destination node 205-225 define each arc element. 
Each node 205-225 includes a set of input arcs and as- 
sociated logic connecting it to antecedent nodes 
205-225 and a set of output arcs and associated logic 
connecting it to consequent nodes 205-225. The rela- 
tionship between the input arcs for a given node 
205-225 is defined by a logical sentence, containing 
possibly nested conjunctive and disjunc^Ne proposition- 
al connectives, in which each arc is represented by a 
distinct propositional synrtbol. The output arcs for a given 
node are related by a separate logical sentence of 
equivalent form. Node 201 has no input arcs and is re- 
ferred to as an initial node. Nodes 299 that have no out- 
put arcs are referred to as temninal nodes. 
[0039] I n the preferred embodiment, a two-level proc- 
ess model is used to represent the collection of site-to- 
site information exchanges and site-specific sequences 
of actions. A public process definition or module 116a 
specifies the relationship between all site-to-site infor- 
mation exchanges. The sequence of possible actions 
within a single site 101. 102, 103, for a particular node 
in a public process definition 11 6a, is specified by a pri- 
vate process definition or module 118a, 118b, 118c. 
Both the public and private process definitions 116a, 
1 1 8a, 1 1 8b, 1 1 8c are built on top of the process definition 
language with special interpretations for node 205-225 
and arc elements. In a public process definition 116a, 
each node el^ent represents a specific site 101 , 102, 
1 03 and each arc element represents a message with 
specific infomrtation contents that are sent from the site 
101 , 102, 103, represented by the arc's source node to 
the site represented by the arc's destination node. The 
graph for a public process can include only a single initial 
node. The public process definition 116a, then, ts a 
specification of '^vho does what when" among a set of 
sites 1 01-1 03 for a particular purpose. Each public proc- 
ess definition 1 1 6a specifies a set of valid sequences of 
communication events among the participating sites 
101 . 102, 103. More specificalty, the same public proc- 
ess definition 116a is provided to each site 101, 102, 
103 having an action in the public process definition 
1 1 6a. As shown in Rgure 1 . each site 1 01 , 1 02, 1 03 may 
have one or more public process definitions 116a, one 
for each inter-site process. In a private process defini- 
tion 1 1 8a, 1 1 8b, 1 1 8c, node elements represent specific 
programmatic actions and arc elements specify the or- 
der in which these actions are executed. The private 
process definition 118a, 118b, 11 8c specifies how sites 
1 01 -1 03 process received messages and construct out- 
going messages. Moreover, private process definitions 
1 1 8a, 1 1 8b, 1 1 8c specify what happens within a node of 



public process definition 1 1 6a. Thus, the private process 
definitions 118a, 118b, 118c include routines and proc- 
esses that are tailored to the particular site 101, 102, 
1 03 to which the private process definitions 1 1 8a, 1 1 8b, 

5 1 1 8c is assigned or operates upon. Still more particular- 
ly, the private process definitions 118a, 118b, 118c are 
designed for interaction using the operating systems, 
applications and resources of the site to which it is as- 
signed. Thus, as depicted in Figure 1 each of the private 

10 process definitions 1 1 8a, 1 1 8b. 1 1 8c is different for each 
site 101, 102, 103. Nonetheless, when sites 101. 102, 
1 03 are similarly configured (e.g., have the same oper- 
ating systenrts, applications and resources) the private 
process definitions 118a, 118b, 118c may be used or 

IS shared. Those skilled in the art will recognize that each 
site 1 01 , 1 02, 1 03 may also include a plurality of private 
process definitions 1 1 8a, 1 1 8b, 1 1 8c as depicted in Fig- 
ure 1 . The plurality of private process definitions 118a. 
118b. 11 8c may be for one public process definition 116a 

20 or different public process definitions 1 1 6a. 

[0040] The prefen'ed embodiment models the infor- 
mation contained in the messages sent between sites 
1 01 , 1 02 and 1 03 as objects with restricted structure and 
behaviors. These objects are data containers whose 

25 possible contents are specified by object definitions 
120a, 120b, 120c. In the preferred embodiment, an ob- 
ject definition 120a, 120b, 120c takes the form of an 
XML (Extensible Maricup Language) DTD (Document 
Type Definition). This definition specifies the lexical and 

30 granrtmatical form of ail objects of that type. Object def- 
initk}ns 120a, 120b, 120c are referenced by both publb 
and private process definitions. 
[0041] Refening now to Figure 2, an exemplary publfc 
process definition 200 is shown. The public process def- 

35 initk>n 200 is represented graphically as a flow chart. 
Figure 2 shows a publk: process definition 200 that 
specifies a set of possible interactions among sites 
101-103. Process 200 comprises a set of nodes 205 
through 225 and a set of communk:ation events 230 

40 through 250. Each node corresponds with a specific site 
101-103, and associated with each node 205 through 
225 of publk: process definition 200 is a private process 
definition 118a, 118b, 118c. Figure 3 shows an exem- 
plary private process definition 300 associated with 

45 node 210. 

[0042] Each communbation event 230-250 that con- 
nects one node to another in a publk: process definition 
200 represents the exchange of a message of a known 
object type. For example, the known objects may be any 

50 one of the conventional types of business objects such 
as a purchase order object, an confimrtation messages 
object, etc. Such objects 120a, 120b, 120c are defined 
in the object definition 120a, 120b, 120c so that each 
site 1 01 . 1 02, 1 03 may use the object definitions 1 20a, 

55 1 20b, 1 20c as needed to process objects on either the 
public level or the private level. In other words, pubric 
process definition 200 is a logical grouping or a directed 
graph of interdependent communbation events 
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230-250 among the sites 101-103 shown in Figure 1. 
This grouping specifies a set of valid sequences of cohd- 
munication events among the partk:ipating sites 101, 
102, 103. Specifically, public process definition 200 de- 
scribes at communication event 230 a purchase order 
sent from site 101 to site 102. This purchase order is 
generated by the private process of site 101 associated 
with node 205. Node 210 is a branching node, and two 
communication events, 235 and 240, are produced at 
that node. Depending on a specified branch condition, 
either one of the events occurs or both events occur 
The conditions under which these two events trigger are 
not indicated by public definition 200, since they are 
known only to the site 1 02, These conditions are con- 
tained in private process definition 1 1 8b associated with 
node 210. and thus site 1 02. Those skilled in the art will 
also recognize that the private process definition 118b 
may be a set of private process definitions that conre- 
spond to an instance of a publk: process definition 1 1 6a. 
[0043] The occurrence of events 235 and/or 240 
causes the executk>n of the node(s) that immediately 
follow and execution proceeds downward on the Figure. 
Node 225 represents a branch junction node that can 
wait for one or all events of a set that connect to it. Fol- 
lowing execution of node 225 the public process termi- 
nates at terminal 299. 

[0044] Associated with each node 205 th rough 225 of 
public process definition 200 is a private process defini- 
tion 118a, 118b, 118c. For example. Figure 3 shows a 
private process definition 300 associated with node 21 0. 
Unlike the publk: process definition 200, the content of 
private process definition 300 is determined and known 
solely t>y the corresponding site, site 102 in this case. 
Private process def initton 300 includes a number of ac- 
tk>ns 305 through 330 that are controlled according to a 
specified logic. Possible actions include extemal busi- 
ness applbation interactions, script executton, user no- 
tification and approval, time delay, output object speci- 
fication, and sub-process execution. All instances of the 
private process definition 300 have access to the object 
of type 'Purchase Order* that is contained in communi- 
cation event 230. Any action in private process definition 
300 can reference this object. Private process definition 

300 is constrained to produce a object either of type 'Ac- 
knowledgment* or of type 'Purchase Order* conrespond- 
ing to communication events 235 and 240 respectively. 
[0045] Refemng now to Figure 3, one exemplary em- 
bodiment for a private process definition 300 is shown. 
Private process definition 300 begins at initiator action 

301 that executes after communk:atk)n event 230 com- 
pletes. Those skilled in the art will recognize that the 
process would be similar for a variety of other private 
process definitions such that once the object is trans- 
ferred to or received by the site 101 , 102, 103, the pri- 
vate definition con^esponding to the node following the 
communication event is autonnatbatly started. Private 
process 300 continue to action 305. Action 305 execu- 
tion entails posting an infomnation block corresponding 



to the received purchase order into business application 
113. Following completion of action 305 execution con- 
tinues to action 310. Ac^on 310 entails querying busi- 
ness application 1 14 to detemnine if the item associated 

5 with the Purchase Order of communicatton event 230 is 
locally stocked or if the item is outsourced. The result of 
this query is put into a variable named 'OUTSOURCED* 
in a set of variables associated with private process 300. 
Action 31 5 is executed sut>sequent to action 31 0. Action 

10 315 entails an IF-THEN-ELSE conditional test on the 
value of OUTSOURCED inside of a script action. Re- 
sults of this conditional test determine whether path A 
or path B is followed subsequent to action 315 comple- 
tion. Path A execution proceeds to action 320, whk:h en- 

is tails the constmction of a object of type 'Acknowledg- 
ment* and its designation as an output of the private 
process. Path B execution proceeds to action 325, 
which entails the construction of a object of type 'Pur- 
chase Order* and its designation as an output of the pri- 

20 vate process. Paths A and B tenninate in actk>n 330, 
which entails notification of a designated user via elec- 
tronic mail of certain status infomriation associated with 
the running process. This information includes identify- 
ing characteristics of the purchase order and results of 

25 business applk^ation queries. Folk>wing execution of ac- 
tion 330, the private process terminates, and control re- 
turns to the public process level. The use of such private 
definitions is particulariy advantages because it pro- 
vides unifomn control and regulation of the inter-site 

30 processes, while allowing maximum flexibility through 
the use of private definitions that allows the controller of 
a particular site to implement the private definition in any 
number of ways according to parameters, resourccss, 
and other constraints for a particular site. 

3s [0046] Each site of the preferred embodiment in- 
cludes a conrtbination of components that support the 
design, implenDentation and maintenance of public and 
private processes and the runtime components that 
support the execution of these processes. Figure 4 

^ shows the preferred configuration of an example site 
102. 

[0047] The standard site 1 02 is comprised by a single 
server 480 and one or more clients 460, 470 that com- 
municate with the server over a network 409. Clients 

45 460 and 470 and server 480 run on separate host conrv 
puters. Clients 460 and 470 contain graphk:al user in- 
terfaces (GUI's) 465 and 475 respectively. In addition, 
server 480 includes or has access to database 41 0 and 
applications 420 and 430. In the preferred embodiment, 

50 database 41 0 resides on a host computer that Is sepa- 
rate from the one on whk:h server 480 is located .Clients 
460 and 470 and server 480 share common represen- 
tations of relevant information by interacting over net- 
work 409 according to a specified and conventional 

55 communfcation protocol. Such shared information rep- 
resentations include publk: and private process defini- 
tions, object definitions, process execution histories, as 
well as information about other sites with which the site 
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interact. Human users 440 and 450 interact with site 
102 via client GUI's 465 and 475 to view, create, edit, 
and noanage the shared information representations de- 
limited above. For exanrtple, users 440 and 450 are able 
to view and edit graphical representations of public proc- 
ess 200 and private process 300 on GUI's 465 and 475. 
Rgures 8 and 9 shown a screen shot of the GUIs cor- 
responding to the public and private process definition 
described above with reference to Figures 2 and 3, re- 
spectively. 

[0048] The server 480 of the preferred enrtbodiment is 
comprised of a middle-tier manager set 482, an execu- 
tion engine 484, a transport manager 486 and adapters 
488 and 489. The middle-tier manager set 482 controls 
the access and flow of information between network 
409, engine 484, and database 410. In addition, it Im- 
plements associated application logic, and Insures the 
consistency of information between these elements. 
With respect to network 409, set 482 mediates access 
to infonnation fmm concurrently operating clients and 
other components of server 480. 
[0049] As discussed in detail below, the installation of 
public and private processes 200 and 300 requires the 
prior approval of user 440 or 450. Once this approval is 
received, it is entered by the appropriate user into client 
460 or 470 via the respective GUI. A kx^l install signal 
is then relayed over network 409 to server 480. Manager 
set 482, acting upon the received signal, initiates the 
installation of the process definitions into engine 484. 
During installation, the execution engine 484 transforms 
the process definitions ft receives into executable state 
machines which are saved in database 410. This trans- 
fomnation extracts from the public process definitk)n all 
nodes connected to arcs involving the target site. The 
resulting state machine contains all infomnation neces- 
sary for a single site to participate in the execution of 
the original public process. Once the installation is conr>- 
plete, manager set 482 provides engine 484 with any 
additional infonnation stored in database 410 or re- 
ceived from clients 460 and 470 needed to perfonn proc- 
ess execution. Persistence of shared data is maintained 
by connmuncation with database 410. 
[0050] Once the installation of private and public proc- 
ess definitions 200 and 300 is complete, engine 484 
control their execution.. During execution, the execu- 
tion engine 484 manages two key activities: inbound 
and outbound communk:ation with other sites via trans- 
port manager 486 and interactions with applk:ations 420 
and 430 via adapters 488 and 489. The engine 484 also 
manages through manager set 482 several auxiliary ac- 
tivities including the sending and receiving of messages 
to and from users 440 and 450 and the storage of log 
information in database 410. 

[0051] During the execution of a public process defi- 
nition, such as definition 200, transport manager 486 
manages convnunteationsto and from Intemet 104. For 
example, publk: process definitk>n 200 antk;ipates the 
receptk)n of purchase order 230 and acknowledgment 



245 by site 102, as well as the sending of acknowledg- 
ment 235 and purchase order 240. In this capacity, nrian- 
ager 486 preferably handles retry and acknowledgment 
logic (based on the properties of the service it is using). 
5 Messages are created outside of any specific transport 
service and communication security is message based. 
Non-repudiation receipts for both origin and delivery are 
supported. 

[0052] During execution, adapters 488 and 489 me- 

fo diate the flow of data between the execution engine 484 
and extemal applications 420 and 430. For example, re- 
fening to step 315 of private process definition 300, en- 
gine 484 may transmit a request through adapter 488 
or 489 that application 420 or 430 determine whether 

15 the item in question is outsourced. In turn, the applica- 
tion will respond through the respective adapter. Adapt- 
er configuration options for 488 and 489 are set by au- 
thors of private processes for the associated site. These 
adapters 488 and 489 communicate their acceptable 

20 configuration options to the middle-tier manager set 482 
at the time of their installation. The configuration inter- 
face for adapters 488 and 489 allows a private process 
to insert data into an extemal application, retrieve data 
from an extemal application or listen for a specific event 

2S produced by the extemal application, where the insert- 
ed, retrieved or listened for data is represented by an 
object definition. Adapters 488 and 489 also insure uni- 
fonn properties of state/consistency management and 
auditing behavior across the different applications that 

30 can be integrated with the system. During process exe- 
cution, adapters 488 and 489 map the insertion, retrieval 
and listened for actions specified in a private process 
into specific interactions with target applk:ations 420 
and 430. 

35 [0053] Operation of a site of the preferred embodi- 
ment revolves around the life cycle of a public process 
definition and the associated private process and object 
definitions. Shown in figure 5, this cycle begins with the 
creation of a publk: process definitk>n and referenced 

40 object definitions then continues with the distribution of 
the public process definition and object definitions, cre- 
ation of the necessary private process definitions, instal- 
lation of the process, and ends with process execution. 
[0054] In step 502, the user creates a public process 

^ definition. The site at which the public process definition 
200 is created ts refen^ed to as the authoring site. Cre- 
ation of the public process definition 200 includes the 
creation of all object definitions that represent site-to- 
site messages in the publk: process definition. In the 

50 preferred embodiment, both public process, and object 
definitions are created by users 440 and 450 interacting 
with manager set 482 through client GUI's 465 and 475. 
During creation of publk: process definition 200, for ex- 
ample, user 440 specifies the sequence of interactions 

55 among all participating sites 101 , 102 and 103 and the 
logic connecting these interactions. I nth is example, GUI 
465 would present def in ition 200 as a set of icons inter- 
connected by flow indk:ators that would appear much 
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as the diagram in figure 2. Definitions for the purchase 
order, acknowledgnrtent and rejection objects would also 
be created by user 440 via GUI 465 if they did not pre- 
exist. 

[0055] After the public process and necessary objects 
have been defined, the user proceeds with distribution 
of the process. In step 504, the authoring site sends over 
the internet 104, the authored public process definition 
and referenced object definitions to all sites participating 
in the public process. Those skilled in the art will recog- 
nize that internet 104 may be a intranet on a local area 
network (LAN), an intemet on a wide area network 
(WAN), or the Intemet. In this case, site 102 is the au- 
thoring site and sites 101 and 103 are the partk:ipant 
sites. In order for site 102 to send publk: process defi- 
nition 200 and associated object definitions over the In- 
temet, the definitions are sent from manager set 482 to 
transport manager 486 and from there to the transport 
managers of the participant sites. Upon receipt of public 
process definition 200 and object definitions by the par- 
tk^ipant site transport managers, in this case sites 101 
and 103, the definitions are passed from the transport 
manager to the middle-tier managers for persistent stor- 
age in the site database. After reviewing received public 
process definition 200 and object definitions via a client 
GUI, users at the participant sites 1 01 and 1 03 must ap- 
prove or disapprove the publk: process definition, said 
approval or disapproval being sent via the transport 
managers of the partner sites to the authoring site. While 
public process definition 200 is being reviewed at par- 
tk^ipant sites 101 and 103, authoring site 102 waits for 
the approval or disapproval votes to be received by 
transport manager 486 in step 508. The approval or dis- 
approval by sites 101 and 103 is likely to tum on conrv 
mercial, ratherthantechnk:al, concerns. If apartnersite 
finds the commercial arrangements described in defini- 
tion 200 acceptable, it retums an approval signal to the 
authoring site, in this case site 1 02. In step 508, the sys- 
tem tests for universal approval, if either participant site 
101 or 103 disapproves of pubic process 200, authoring 
site 1 02 will distn'bute an abort nnessage through trans- 
port manager 486 to partner sites 101 and 103, thus 
reaching step 510. In this case, publk: process definition 
200 is abandoned and sites 1 01 , 1 02 and 1 03 may start 
negotiating for a new publk: process definition. If the 
publk: process definitron is universally accepted in st^ 
508, the authoring site 102 distnlsutes a conrvnit mes- 
sage to each of the partner sites . 
[0056] After the commit messages have been trans- 
mitted by the authoring site and received by the partk:- 
ipant sites, both the authoring site and participant sites 
proceed with creation of the private processes associ- 
ated with the publk: process nodes owned by each site. 
This is represented by step 514 in figure 5. Each site 
user creates a private process definition for each node 
of the publk: process definition associated with the us- 
er's site. For example, user 440, creates private process 
definition 300 for node 210 and an accompanying pri- 



vate process definition for node 220, since nodes 210 
and 220 are each associated with site 102. Likewise, a 
user at site 101 would create private process def initk)ns 
for nodes 205 and 225, while a user at site 103 would 
5 create a definition for node 215. 

[0057] After successfully implementing the necessary 
private process definitions, each participant site sends 
a message to the authoring site signally the completion 
of private process implementation. In step 516, the au- 
10 thoring site gathers private process completion signals 
from all sites. If any site fails to tnnplement one or more 
private processes, it will send a failure message to the 
authoring site. In this case, the implementation process 
will be aborted (step 518), and process definition 200 
will be abandoned. Once the authoring site has received 
messages from alt partk:ipant sites indicating successful 
private process implementation, and has successfully 
implemented its own private processes, the authoring 
site can begin the installation process (step 520). 
[0058] Process installation (step 520) begins with the 
authoring site sending installation messages to all par- 
ticipant sites. After receiving the installation message, 
each participant site locally installs the publk: process. 
Figure 6 shows a flow diagram of a process for installing 
at a single site the private process definitions associated 
with a public process definition. In step 602, the publk: 
process definrtton and associated private process defi- 
nitions are passed from manager set 482 to execution 
engine 484. In step 604, the publk: process definition is 
compiled to produce a state machine that contains 
states only for the site in question. For example, the 
process of compiling publk: process def in itk)n 200 at site 
102 will result in states associated with nodes 210 and 
220. Recorded in the state machine is a triggering event 
for each state. Continuing with the example of publk: 
process definition 200, site 102 records that event 230. 
a purchase order from site 1 01 , triggers the state asso- 
ciated with node 210, and that event 245. an acknowl- 
edgment from site 103. triggers the state associated 
with node 220. In step 606, each state of the state ma- 
chine is bound by a "call" command with an associated 
private process definition. For example, site 102 will 
bind private process definition 300 with the state asso- 
ciated with node 210. The result of this binding is that 
when the state associated with node 21 0 is triggered by 
a purchase order from site 101 , private process defini- 
tion 300 is called and executed. In step 608, a determi- 
nation is made as to whether the site in question is the 
initiator of the public process. If not, as in the example 
of site 1 02, the execution engine detennines the trigger- 
ing message to be received and registers it in the trans- 
port manager. In the example of site 102, the two trig- 
gering messages are purchase order 230 from site 1 01 
and acknowledgment 245 from site 1 03. If the site is the 
initiator of a public process, the triggering event for the 
first private process is intemal to the site and is regis- 
tered in step 612 as an event trigger, a scheduled star- 
tup, or as a subprocess trigger. 
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[0059] After success! utty installing the public process, 
each participant site sends an installation confirmation 
message back to the authoring site. In step 522, the au- 
thoring site collects installation confirmation messages 
from all participant sites. If any site is unable to install 
the public process, the process is aborted 524 as de- 
scnbed above. Successful installation at the authoring 
site triggers the transmission of messages to all partic- 
ipants indicating that the public process has been in- 
stalled at all involved sites. At this point the process is 
ready for execution (step 526). 
[00^] As discussed above, the execution of a public 
process is actually performed by the interactive execu- 
tions of the associated private processes at the partner 
sites. The execution of an installed public process by a 
single site is shown in figure 7. Execution begins in st^ 
702 with an initiating event that can include the follow- 
ing: receipt of a message from a partner site, an event 
associated with an application, a scheduled startup, or 
a subprocess trigger. For example, node 210, of public 
process definition 200, is triggered by the receipt of a 
purchase order message from site 1 01 . In step 704, the 
execution engine at the triggered site creates an in- 
stance in the appropriate state machine and sets the 
machine to the initial state. In step 706, the execution 
engine fetches the private process associated with the 
associated public process node. For exannple, upon the 
triggering of node 210. private process definition 300 is 
accessed, tn step 708. the execution engine passes ap- 
propriate data including the contents of the event 230 to 
the private process and initiates its execution, tn step 
710, the private process executes and returns data to 
the execution engine, and in step 712, the execution en- 
gine acts upon the basis of the returned data. For ex- 
ample, private process 300 returns to execution engine 
484 either an instruction to send an acknowledgment to 
site 101 or a purchase order to site 103. It is noted that 
during the execution of the private process in step 710. 
engine 484 may make use of applk^ations 420 and 430. 
Execution engine 484 responds accordingly. In step 
714. a detennination is made by the execution engine 
as to whether a local terminal state of the public process 
definition has been reached. This determination is a lo- 
cal determination and is limited to the partrcipation of 
the site in the publk: process. For example, the comple- 
tion of node 220 is a local terminal state for site 102. 
since it is the final node in process 200 that conr^onds 
with site 1 02. Likewise, depending on the outcome of 
the accompanying private process, the completion of 
node 210 may be a local terminal state for site 102. If 
local terminatk>n is encountered, the publk; process 
ends for the site in step 716. Step 716 is not complete 
until a two-phase commit protocol has been executed 
among sites 101, 102. and 103 ensuring mutual conrr- 
pletion of process 200 execution. 
[0061] If the kx:al tenninal state is not encountered in 
step 714, the transport manager waits for triggering 
messages from partner sites (step 718). For example, 



if the result of node 21 0 is the transmission of a purchase 
order in event 240, transport manager 486 waits for the 
acknowledgment of event 245 to trigger the private proc- 
ess associated with node 220. Once the triggering mes- 
5 sage is received in step 720, the execution engine looks 
up the associated process state in step 722. The private 
process then begins execution at step 706 and is per- 
formed as described above. 



Claims 

1 . A method for coordinating a process between a first 
site and a second site in a distributed information 

15 system using a public process definition (116a) 
comprised of a first node (205) associated with the 
first site (1 01 ), a second node (210) associated with 
the second site (102) and an arc connected to the 
first and second nodes (205, 21 0), the method com- 

20 prising: 

executing the first node (205) of the publk: proc- 
ess definition (1 1 6a) at the tirst site (1 01 ) by ex- 
ecuting a first private process definition (118a) 
25 associated by shared information with the tirst 

node (205); and, 

upon receiving the message defined by the arc, 
executing the second node (210) of the publk: 
process definition (116a) at the second site 
30 (102) by executing a second private process 

definition (118b) associated by shared informa- 
tion with the second node (210). 

2. The method of claim 1 , wherein the arc is a business 
35 object (120). 

3. The method of daim 1 or 2, further comprising: 

at the first site (101), creating (502) the publk: 
40 process definition (116a); 

distributing (504) the public process definition 
(116a) to the second site (102); 
at the first site (101), associating with the first 
node (205) by shared information a first private 
^ process definition (118a), containing an action 

preceding the transmission of the message 
from the first site (1 01 ); and, 
at the second site (102), associating with the 
second node (210) by shared infomnation a 
so second private process definition (118b) con- 

taining an action following the reception of the 
message by the second site (102). 

4. The method of daim 3, wherein the step of distrib- 
55 uting (504) further comprises: 

reviewing the public process definition (116a) 
at the second site (1 02); and. 
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in the event of an approval of the public process 
definition (1 1 6a) at the second site (1 02), trans- 
mitting an approval signal from the second site 
(102) to the first site (101); and. 
in the event of a disapproval of the public proc- s 
ess definition (116a) at the second site (102). 
transmitting a disapproval signal from the sec- 
ond site (102) to the first site (101). 

5. The method of daim 3 or 4, wherein the step of dis- io 
tributing (504) further comprises: 

in the event of receiving at the first site (1 01 ) an 
approval signal from the second site (102). 
transmitting a conrvnit message to the second is 
site (102); 

installing the public process definition (116a) 
and the first private process definition (1 1 8a) at 
the first site (101); and, 

in the event of receiving at the second site (1 02) 20 
the commit message from the first site (101), 
installing the public process definition (116a) 
and the second private process definition 
(118b) at the second site (1 02). 

25 

6. The method of claim 3, 4 or 5, wherein the step of 
distributing (504) further comprises: 

in the event of receiving at the first site (1 01 ) a dis- 
approval signal from the second site (102), trans- 
mitting an abort message to the second site (1 02). 30 

7. The method of one of the preceding claims, further 
comprising: 



creating (502) at the first site (101) apublic 
process definition (116a) including a first node 
(205) associated with the first site (1 01 ), a sec- 
ond node (21 0) associated with the second site 
(1 02), and an arc (1 20) interposed between the 
first node and the second node; 
distributing (504) the public process definition 
(1 1 6a) to the second site (1 02); 
creating (514) at the first site ( 1 01 ) a first private 
process definition (118a) associated by shared 
infomnation with the first node (205) and in 
which an action preceding the transmission of 
the message ft-om the first site ( 1 01 ) is defined; 
and, 

creating (51 4) at the second site (1 02) a second 
private process definition (118b) associated by 
shared information with the second node (210) 
and in which an action following the reception 
of the message by the second site (1 02) is de- 
fined. 

10. The method of daim 9, further comprising: 

executing the first node (205) of the public proc- 
ess definition (116a) by executing the first pri- 
vate process definition (118a) at the first site 

(101) ; and 

upon receiving the message, executing the 
second node (210) of the public process defini- 
tion (116a) by executing the second private 
process definition (118b) at the second site 

(102) . 



at the first site (101), transfomiing the public 35 
process definition (1 1 6a) into a first state ma- 
chine; and, 

at the second site (1 02), transforming the public 
process definition (116a) into a second state 
machine. 40 

8. The method of one of the preceding daims, further 
comprising: 

recording in a first process execution history ^ 
the execution of the first node (205) of the pub- 
lic process definition (116a): 
recording in a second process execution histo- 
ry the execution of the second node (210) of 
the public process definition (1 1 6a): so 
auditing the first and second process execution 
histories. 

9. A method for creating a process definition govern- 
ing a process between a first site (1 01 ) and a sec- 55 
ond site In a distributed information system (102) 
the method comprising: 



PatentansprOche 

1. Verfahren zum Koordinieren des Prozesses zwi- 
schen einer ersten Stelle und einer zweiten Stelle 
in einem verteilten Infomnationssystem unter Ver- 
wendung einer offentlichen ProzeBdefinition 
(116a), welche einen der ersten Stelle (101) zuge- 
ordneten ersten Knoten (205), einen der zweiten 
Stelle (102) zugeordneten zweiten Knoten (210) 
und einen mit dem ersten und dem zweiten Knoten 
(205, 210) verbundenen Bogen umfaBt, mit folgen- 
den Verfahrensschritten: 

Ausfuhren des ersten Knotens (205) der offentii- 
chen ProzeBdefinition (116a) bel der ersten Stelle 
(101) durch Ausfuhren einer ersten privaten Pro- 
zeBdefinition (118a), die dem ersten Knoten (205) 
durch gemeinsam genutzte Information zugeordnet 
wird; und bei Empfang der durch den Bogen defi- 
nierten Nachricht, Ausfuhren des zweiten Knotens 
(210) der offentlichen ProzeBdefinition (116a) bei 
der zweiten Stelle (102) durch Ausfuhren einer 
zweiten privaten ProzeBdefinition (118b), die dem 
zweiten Knoten (210) durch gemeinsam genutzte 
Information zugeordnet wird. 
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2. Verfahren nach Anspruch 1 , wobei der Bogen ein 
Geschaftsobjekt (120) ist. 

3. Verfahren nach Anspruch 1 oder2, mit den weiteren 
Verf ah renssch rttten : 

Erzeugen (502) der offentlichen ProzeBdefini- 
tion (116a) bei derersten Stelle (101); 
Weitergeben (504) der offenlJichen ProzeBde- 
finftion (116a) zu der zweiten Stelle (102); 
wobei bei der ersten Stelte (1 01 ) dem ersten 
Knoten (205) durch gemeinsam genutzte Infor- 
mation eine erste private ProzeBdefinition 
(1 1 8a) zugeordnet wird, die eine Aktion umfaBt, 
welche der Ubertragung der Nachricht von der 
ersten Stelle (1 05) vorhergeht; und 
wobei bei der zweiten Stelle (1 02) dem zweiten 
Knoten (210) durch gemeinsam genutzte Infor- 
mation eine zweite private ProzeBdefrnition 
(1 1 8b) zugeordnet wird, die eine Aktion umfaBt, 20 
die dem Empfang der Nachricht an der zweiten 
Stelte (102)folgt. 

4. Verfahren nach Anspruch 3, wobei der Schritt des 
Verteilens (504) die folgenden weiteren Schritte 25 
umtaBt: 

Durchsehen der offentlichen ProzeBdefinltion 
(116a) bei der zweiten Stelle (102); und 
wenn die offentliche ProzeBdefinition (116a) 30 
bei der zweiten Stelle (102) bestatigt 
wird, Obertragen eines Bestatigungssignals 
von der zweiten Stelle (1 02) an die erste Stelle 9. 
(101); und 

wenn die offenttbhe ProzeBdefinition (116a) 35 
bei der zweiten Stelle (1 02) nicht bestatigt wird, 
Obertragen eines Ncht-Bestatigungssignals 
von der zweiten Stelle (1 02) an die erste Stelle 

(101) . 

40 

5. Verfahren nach Anspruch 3 oder 4, wobei der 
Schritt des Verteilens (504) die weiteren Schritte 
umfaBt: 

wenn bei der ersten Stelle (101) ein Bestati- 
gungssignal von der zweiten Stelle (102) emp- 
fangen wird, Obertragen einer Ausfuhrungs- 
nachricht an die zweite Stelte (102); 
Instaltieren der offenttk:hen Prozef3definition 
(1 1 6a) und der ersten privaten ProzeBdefinition so 
(118a) bei der ersten Stelte (101); und 
falls die Ausfuhrungsnachricht von der ersten 
Stelle (101) bei der zweiten Stelle (102) emp- 
fangen wird, Installieren der offentlkrfien Pro- 
zeBdefinition {116a) und der zweiten privaten ss 
ProzeBdefinition (118b) bei der zweiten Stelle 

(102) . 



6. Verfahren nach Anspruch 3, 4 Oder 5, wobei der 
Schritt des Verteilens (504) die weiteren Schritte 
umfaBt: 

falls bei der ersten Stelle (101) ein Ncht-Bestati- 
5 gungssignal der zweiten Stelle (102) empfangen 
wird, Obertragen einer Abbmchnachricht an die 
zweite Stelle (102). 

7. Verfahren nach einem der vorangehenden Anspru- 
10 che, bei dem 

bei der ersten Stelle (101) die offentliche Pro- 
zeBdefinition (116a) in eine erste Abtaufsteue- 
rung transfomniert wird und 
« bei der zweiten Stelle (1 02) die offentliche Pro- 

zeBdefinition (116a) in eine zweite Ablauf- 
steuerung transfonniert wird. 

8. Verfahren nach einem der vorangehenden Anspru- 
che, bei dem 

die Ausfuhrung des ersten Knotens (205) der 
offentlichen ProzeBdefinition (1 1 6a) in einer er- 
sten ProzeBausfuhrungsaufzeichnung aufge- 
zeichnet wird; 

die Ausfuhmng des zweiten Knotens (210) der 
offentlichen ProzeBdefinition (116a) in einer 
zweiten ProzeBausfuhrungsaufzeichnung auf- 
gezek:hnet wird, 

die erste und die zweite ProzeBausfuhrungs- 
aufzeichnung geubt werden. 

Verfahren zum Erzeugen einer ProzeBdefinition zur 
Kontrolie eines Prozesses zwischen einer ersten 
Stelle (101) und einer zweiten Stelle (102) in einem 
verteitten Informationssystem, mit folgenden Ver- 
fahrensschritten: 

Erzeugen (502) einer offentlichen ProzeBdefi- 
nition (116a) bei der ersten Stelle (101), mit ei- 
nem der ersten Stelle (101) zugeordneten er- 
sten Knoten (205), ein^ der zweiten Stelle 
(1 02) zugeordneten zweiten Knoten (201 ) und 
einem Bogen (120), der zwischen dem ersten 
Knoten und dem zweiten Knoten liegt; 
Weitergeben (504) der offentlichen ProzeBde- 
finition (116a) an die zweite Stelle (102); 
Erzeugen (514) einer ersten privaten 
ProzeBdefinition (11 8a)' bei der ersten Stelle, 
die mittels gemeinsam genutzter tnfonnation 
dem ersten Knoten (205) zugeordnet wird, wo- 
bei eine der Ubertragung der Nachricht von der 
ersten Stelte (102) vorangehende Aktion defi- 
niert wird; 

Erzeugen (514) einer zweiten privaten 
ProzeBdeftnrtton (118) bei der zweiten Stelle, 
wek:he mittels gemeinsam genutzter Informa- 
tion dem zweiten Knoten (210) zugeordnet 



11 



21 



EP0 954 799B1 



22 



wird, wobei eine dem Empfang der Nachricht 
bei der zweiten Stelle (1 02) folgende Aktion de- 
finiert wird. 

10. Verfahren nach Anspruch 9, bei dem 5 

der erste Knoten (205) der offentlichen 
ProzeBdefinition (1 1 6a) ausgefuhrt wird, indem 
die erste private ProzeJ3definrtion (1 1 8a) bei der 
ersten Stelle (1 02) ausgefuhrt wird; und io 
beim Empfang der Nachricht der zweite Knoten 4. 
(210) der offentlichen ProzeBdeftnition (116a) 
ausgefuhrt wird, indem die zweite private Pro- 
zeBdeflnition (118b) bei der zweiten Stelle 
(102) ausgefuhrt wird. '5 



Revendtcattons 

1 . Proc^d^ de coordination d'un processus entre un 20 
premier site et un second site dans un syst^e d'in- 
formattons r^arti, utiltsant une definition publique 

(1 1 6a) du processus comprenant un premier noeud 
(205) associ6 au premier site (101) et un second 
noeud (21 0) associd au second site (1 02) et un arc 25 
connects aux premier et second noeuds (205, 210), 
ce proc^d comprenant les stapes suivantes : 5. 

ex^cuter te premier noeud (205) de la definition 
publique (1 1 6a) du processus au niveau du pre- 30 
mier site (101) en executant une premiere de- 
finition privee (118a) du processus assod6e 
par des informations partag^es au premier 
noeud (205) ; et 

h la suite de la reception du message d6fini par 35 
Tare, executor le second noeud (210) de la de- 
finition publique (116a) du processus au niveau 
du second site (1 02) en executant une seconde 
definition privee (11 8b) du processus assodee 
par des informations partagees au second ^ 
noeud (210). 

2. Procede selon la revendication 1 , dans lequel Tare 
est un objet de travail (120). 

45 

3. Procede selon la revendication 1 ou 2, comprenant 
en outre : 

6. 

au niveau du premier site (101), 

50 

- creer (502) la definrtion publique (116a) du 
processus ; 

- repartir (504) la definition publique (116a) 
du processus vers le second site (102) ; 
associer au premier noeud (205) par des ss 7. 
infomriations partagees une premiere defi- 
nition privee (118a) du processus conte- 

nant une action precedant la transmission 



du message k partir du premier site (101); 
et 

au niveau du second site (1 02), associer au se- 
cond noeud (210) par des informations parta- 
gees une seconde definition privee du proces- 
sus (11 8b) contenant une action faisant suite k 
la reception du message par le second site 
(102). 

Procede selon la revendication 3, dans lequel I'eta- 
pe de repartition (504) comprend en outre : 

revoir la definition publique du processus 
(116a) au niveau du second site (102) ; et 
dans le cas d'une approbation de la definition 
publique (116a) du processus au niveau du se- 
cond site (102), transmettre un signal d'appro- 
bation k partir du second site (102) vers le pre- 
mier site (1 01 ), et 

dans le cas d'une desapprobation de la defini- 
tion publique (1 1 6a) du processus au niveau du 
second site (1 02), transmettre un signal de de- 
sapprobation du second site (1 02) au premier 
site (101). 

Procede selon la revendication 3 ou 4, dans lequel 
fetape de repartition (504) comprend en outre : 

dans le cas de la reception au niveau du pre- 
mier site (101) d'un signal d'approbation en pro- 
venance du second site (1 02), 

emettre un message d'engagement vers le 
second site (102) ; 

installer la definition publique (116a) du 
processus et la premidre definition privee 
(118a) du processus au niveau du premier 
site (101) ; et 

dans le cas de la reception au niveau du second 
site (102) du message d'engagement en pro- 
venance du premier site (1 01). installer la defi- 
nition publique (116a) du processus et la se- 
conde definition privee (1 18b) du processus au 
niveau du second site (102). 

Procede selon la revendication 3, 4 ou 5, dans le- 
quel retape de repartition (504) comprend en outre, 
dans le cas de la reception au niveau du premier 
site (101) d'un signal de desapprobation provenant 
du second site (1 02), retape consistent k transmet- 
tre un message d'avortement au second site (1 02). 

Precede selon t'une queiconque des revendications 
precedentes, comprenant en outre : 

au niveau du premier site (101) transformer la 
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definition publique (116a) du processus en une 
premidre machine rf6tat ; et 
au niveau du second site (102) transformer la 
definition publique (116a) du processus en une 
seconde machine d'etat. s 

8. Precede selon f une quelconque des revendications 
pr^c^dentes comprenant en outre : 

enregtstrer dans un premier htstorique d^ex^cu- io 
tion de processus rex^cution du premier noeud 
(205) de la definition publique (116a) du 
processus ; 

enregistrer dans un second historique d'execu- 
tion de processus I'execution du second noeud is 
(210) de la definition publique (116a) du 
processus ; 

examiner les premier et second historiques 
d'execution de processus. 

20 

9. Procede pour conrtmander une definition de proces- 
sus commandant un processus entre un premier si- 
te (101) et un second site (102) dans un syst6me 
d*informations reparti, ce precede comprenant : 

25 

creer (502) au niveau du premier site (1 01 ) une 
definition publique (116a) du processus In- 
cluant un premier noeud (205) associe au pre- 
mier site (1 01 ), un second noeud (21 0) associe 
au second site (1 02), et un arc (1 20) interpose 30 
entre le premier noeud et le second noeud ; 
repartir (504) la definition publique du proces- 
sus (11 6a) vers le second site (102) ; 
creer (51 4) au niveau du premier site (1 01 ) une 
premiere definition privee (1 1 8a) du processus 35 
associee par des infonmations partagees au 
premier noeud (205), une action precedant la 
transmission du nnessage d partir du premier 
site (101)etantdefinie;et 
creer (51 4) au niveau du second site (1 02) une to 
seconde definition privee (118b) du processus 
assodee par des informations partagees au se- 
cond noeud (210), une action suivant la recep- 
tion du message par le second site (102) etant 
definie. 45 

10. Precede selon la revendication 9, comprenant en 
outre : 

executer le premier noeud (205) de la definition so 
publique (116a) du processus en executant la 
premiere definition privee (118a) du processus 
au niveau du premier site (101) ; et 
d la suite de la reception du message, executer 
le second noeud (21 0) de la definition publique ss 
(116a) du processus en executant la seconde 
definition privee (1 1 8b) du processus au niveau 
du second site (102). 
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